The Netherlands


Explore the current status of the CER Directive including timelines, transition periods and key national developments.

Current Status: Implemented

Expected or actual implementation date or timeline

The Critical Entities Resilience Act (Wet weerbaarheid kritieke entiteiten), which implements the CER Directive in the Netherlands, was definitively adopted by the Dutch Senate on 7 July 2026. The Act will enter into force on 15 August 2026. From that date, organisations designated as critical entities will become subject to the obligations set out in the Act.

If implemented, whether a transition period applies and, if so, its duration

No formal transition period has been announced. The Act will apply from 15 August 2026. Organisations falling within scope should ensure they are prepared to comply with the new resilience, risk management and incident reporting requirements by that date.

Other important remarks/notes

The Wwke applies to designated critical entities providing essential services in sectors such as energy, water, transport, health and public administration. Unlike the Dutch NIS2 implementation (Cyberbeveiligingswet), organisations cannot self-assess their status under the Wwke; competent authorities will identify and designate entities that fall within scope. Further information on the Dutch government's approach to vital infrastructure can be found here. Key obligations include conducting periodic risk assessments, implementing resilience measures to ensure the continuity of essential services, and reporting incidents that significantly disrupt or could disrupt the provision of those services.

Key contact

Olaf van Haperen Partner

T: +31 10 2488 000 E: olafvanhaperen@eversheds-sutherland.com

View full profile

Robbert Santifort Partner

T: +31 10 2488 000 E: robbertsantifort@eversheds-sutherland.com

View full profile

Explore implementation across other EU member states

Explore jurisdictions

© Eversheds Sutherland. All rights reserved. Eversheds Sutherland is a global provider of legal and other services operating through various separate and distinct legal entities. Eversheds Sutherland is the name and brand under which the members of Eversheds Sutherland Limited (Eversheds Sutherland (International) LLP and Eversheds Sutherland (US) LLP) and their respective controlled, managed and affiliated firms and the members of Eversheds Sutherland (Europe) Limited (each an "Eversheds Sutherland Entity" and together the "Eversheds Sutherland Entities") provide legal or other services to clients around the world. Eversheds Sutherland Entities are constituted and regulated in accordance with relevant local regulatory and legal requirements and operate in accordance with their locally registered names. The use of the name Eversheds Sutherland, is for description purposes only and does not imply that the Eversheds Sutherland Entities are in a partnership or are part of a global LLP. The responsibility for the provision of services to the client is defined in the terms of engagement between the instructed firm and the client.

Connect with us

linkedin logo
facebook icon
youtube icon